Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/As4ZIAy3YWXxHRtQJpLriSwjFrg.roa
File: As4ZIAy3YWXxHRtQJpLriSwjFrg.roa (raw, json)
Hash identifier: pwcMkMUL7rXubDglMuHDZyZ5VjEbWr1TIEFz/60HtZM=
Subject key identifier: 02:CE:19:20:0C:B7:61:65:F1:1D:1B:50:26:92:EB:89:2C:23:16:B8
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4CA346D601B9393A4D24417D7AE15
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/As4ZIAy3YWXxHRtQJpLriSwjFrg.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 168.199.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ca:34:6d:60:1b:93:93:a4:d2:44:17:d7:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02ce19200cb76165f11d1b502692eb892c2316b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:4b:50:95:83:15:d6:a5:2b:db:c0:c0:b3:
16:50:01:60:74:11:d0:48:bb:0d:36:6a:c8:96:ad:
32:ae:eb:8d:06:76:d7:dc:9d:1d:72:a5:f4:a7:7c:
3d:82:0b:9e:b4:f7:3a:77:97:21:18:38:2e:81:5e:
de:65:bd:55:5d:34:57:d1:4c:bd:d0:c3:2f:9f:28:
83:d8:c6:db:aa:e8:d6:67:2d:c9:b7:c8:bc:4a:d7:
61:e1:6a:94:65:3e:e8:c0:d6:3e:7b:98:72:c9:9b:
6b:c6:f1:33:ab:a7:96:b2:f8:2e:11:ea:95:0a:93:
1a:4c:e4:ea:c7:29:58:9d:61:19:d0:d6:06:a3:ed:
36:99:92:6d:38:02:fd:e9:13:1c:13:40:32:dd:32:
05:e2:08:56:ea:12:26:58:76:0f:d0:8c:67:00:19:
f5:d3:d1:06:b4:1c:a0:e7:6f:9a:6b:34:9f:99:a0:
ec:23:fc:54:42:26:e6:95:84:8d:74:fe:d3:d1:16:
d4:20:ec:4c:13:9b:91:c2:6d:cd:20:ac:03:ae:d2:
62:23:b5:ca:8f:34:9c:54:48:72:c3:e4:ce:39:a9:
99:a4:77:4c:01:79:f4:f7:71:8b:4a:64:03:a9:7e:
63:51:25:8e:8c:7d:ec:84:29:0f:0b:54:04:78:ba:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:19:20:0C:B7:61:65:F1:1D:1B:50:26:92:EB:89:2C:23:16:B8
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/As4ZIAy3YWXxHRtQJpLriSwjFrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:51:1d:f9:80:43:14:c6:d1:47:ea:b5:2d:25:47:58:9d:04:
6d:3a:bc:18:72:8a:af:d9:cb:17:14:94:06:23:57:a0:0a:77:
74:ad:71:40:d9:41:d3:29:05:48:c1:4c:48:3c:af:39:f8:5b:
04:ce:3b:dd:3d:3d:c6:dd:76:38:23:99:26:cb:a3:12:0c:e1:
b6:51:1b:51:d6:2a:ff:e8:5b:f3:1e:9e:03:d0:33:4b:16:8b:
5f:10:d1:34:53:8a:da:64:bb:f6:8a:1c:4c:c7:db:4f:6d:8c:
b9:c5:86:a7:75:44:de:9e:41:c5:dc:c6:67:37:d2:bb:b3:d4:
5c:07:5a:43:db:2e:c6:2f:09:7f:08:cb:ae:24:d5:07:81:a7:
c6:bf:bb:b5:54:d0:e1:11:0e:b7:8c:3b:45:3a:88:cc:ca:f9:
ad:69:16:ff:7e:10:8e:ad:04:53:65:f8:ea:37:68:da:98:b2:
33:20:f4:cb:12:38:24:a4:1c:86:83:91:a8:10:9e:46:f6:8c:
42:71:2b:03:37:04:15:aa:57:04:65:fb:fd:73:4d:4f:05:d8:
09:1b:c5:c4:07:9e:a6:e0:e5:c3:29:97:a2:54:45:bf:f3:14:
22:42:46:0b:2d:49:3a:33:d1:54:1f:56:09:b2:c5:8f:45:86:
9a:cc:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org